MALICIOUS — 69ef0218457a1f.pdf
MALICIOUS — 69ef0218457a1f.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
7348352a8d0d3ce5c41eb7e3ec4c2830f8c622fb633e3cad634d732898ce75e0 - SHA-1:
07a0ef54df0ae77944533324e6047d183d1da7fa - MD5:
09cedd5909c30fffcdffadaaec2554bb - ssdeep:
768:ogGzpDipAx8CsqYBPLwOa193t4c2FeU3rFU91rh1dxrbMi0bD46wdFHc4:lGFOpAJaHGsY91F1brbw46wdFHc4 - TLSH:
T1B9317DF750A7EC4C7AC7AB039DAB115D918AD7885132A6B455C87B2CC07C7BD6F40A20 - Submitted as: 69ef0218457a1f.pdf
- File type: pdf · Size: 43077 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/sidobojugonuxexoz.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=how%20to%20overcome%20procrastination%20pdf, https://site-1036988.mozfiles.com/files/1036988/xebekexatusufulufureraf.pdf, https://site-1039918.mozfiles.com/files/1039918/56716194864.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=how%20to%20overcome%20procrastination%20pdf
- https://site-1036988.mozfiles.com/files/1036988/xebekexatusufulufureraf.pdf
- https://site-1039918.mozfiles.com/files/1039918/56716194864.pdf
- https://site-1038660.mozfiles.com/files/1038660/kutosefivuvisajevosaz.pdf
- https://uploads.strikinglycdn.com/files/59a3765a-124e-4bc2-8fb6-0de4150707e1/75828006208.pdf
- https://uploads.strikinglycdn.com/files/6de5bb6a-741e-483d-9b52-513d84214c5f/wojul.pdf
- https://uploads.strikinglycdn.com/files/452b4eb9-b85d-48a2-8e16-ef1259e56085/sokef.pdf
- https://uploads.strikinglycdn.com/files/6dd57798-289c-4335-9c4a-ffdcb138edbd/fopexesivakejalikeforozu.pdf
- https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/sidobojugonuxexoz.pdf
- https://wefolukozik.weebly.com/uploads/1/3/1/4/131406413/43ee661.pdf
- https://jabiratunibi.weebly.com/uploads/1/3/2/6/132683422/kepaj.pdf
- https://gimejexoxixaza.weebly.com/uploads/1/3/1/8/131872185/aa94aa7f99c.pdf
- https://tipefejiri.weebly.com/uploads/1/3/0/9/130969755/buwobu.pdf
- https://lodirunesu.weebly.com/uploads/1/3/0/8/130874391/2736.pdf
- https://zukamukenipebo.weebly.com/uploads/1/3/1/3/131380388/7250537.pdf
- https://cdn.shopify.com/s/files/1/0500/0740/8800/files/lirujukovozenogejuki.pdf
- https://cdn.shopify.com/s/files/1/0437/9682/4221/files/secrets_of_closing_the_sale_drive.pdf
- https://cdn.shopify.com/s/files/1/0430/6747/4087/files/kuzepugebobiwewaj.pdf
- https://cdn.shopify.com/s/files/1/0498/0726/1853/files/low_key_lighting.pdf
- https://uploads.strikinglycdn.com/files/f5fecc1c-05de-4fbc-a5ae-8747231d4ffe/30956354547.pdf
- https://uploads.strikinglycdn.com/files/9777a8c8-6755-4c5c-b3a8-1f4afca3d05b/vovufajewinimaku.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/
Embedded domains
- gettraff.ru
- site-1036988.mozfiles.com
- site-1039918.mozfiles.com
- site-1038660.mozfiles.com
- uploads.strikinglycdn.com
- dutitujazekap.weebly.com
- wefolukozik.weebly.com
- jabiratunibi.weebly.com
- gimejexoxixaza.weebly.com
- tipefejiri.weebly.com
- lodirunesu.weebly.com
- zukamukenipebo.weebly.com
- cdn.shopify.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report